
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.mft
File: Alr-kZVIIEnyUJPriYEVxr03FEg.mft (raw, json)
Hash identifier: WrCSacaHsmqzJH5Dpnj0QBKJNI6cPj6sbiFsWwMvmWM=
Subject key identifier: 79:D2:FE:EA:12:EE:A8:04:C5:4D:8F:00:79:EE:8D:40:FB:68:10:74
Authority key identifier: 02:5A:FE:91:95:48:20:49:F2:50:93:EB:89:81:15:C6:BD:37:14:48
Certificate issuer: /CN=A91BA044/serialNumber=025AFE9195482049F25093EB898115C6BD371448
Certificate serial: 038F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Alr-kZVIIEnyUJPriYEVxr03FEg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.mft
Manifest number: 0387
Signing time: Sat 03 Oct 2026 01:48:45 +0000
Manifest this update: Sat 03 Oct 2026 01:48:44 +0000
Manifest next update: Sat 10 Oct 2026 01:48:44 +0000
Files and hashes: 1: Alr-kZVIIEnyUJPriYEVxr03FEg.crl (hash: q8ab+1w5wNTfamkuWkt8Cqd5Sl7ZdAkfqBPOJMKNVcs=)
2: 5CE70ACC074E11ED99CF6642C4F9AE02.roa (hash: z9m+uvmmZmgBXsz1OFhoOX9NKLKtBpx/ZqKVtid9t1g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.crl
rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Alr-kZVIIEnyUJPriYEVxr03FEg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 01:48:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 911 (0x38f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA044, serialNumber=025AFE9195482049F25093EB898115C6BD371448
Validity
Not Before: Oct 3 01:48:44 2026 GMT
Not After : Oct 10 01:48:44 2026 GMT
Subject: CN=6ac05efc-6096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a7:79:d5:be:f1:01:f4:39:67:90:4e:2b:b0:
23:02:dc:fe:8b:54:68:de:c3:fb:91:3f:0a:40:1e:
86:3b:3c:a3:6d:66:a0:23:a4:c7:35:72:fb:76:7a:
32:b1:cb:65:60:e7:f7:b2:49:3a:e1:cc:e1:8e:ed:
00:dc:26:e2:9d:97:05:6e:bd:09:91:a4:5a:fa:9a:
53:c5:78:1e:4f:de:95:1e:36:88:87:0f:f7:55:67:
ec:99:9e:18:a2:bb:d5:bf:e0:81:f9:6c:2b:dc:ac:
45:ff:74:64:f3:10:d4:48:01:8c:58:52:00:35:df:
77:70:86:88:0a:68:d6:ab:25:a6:48:8f:49:c4:ec:
49:32:ba:25:84:1b:41:86:e0:8d:a3:77:f0:a4:0e:
c6:7b:89:8d:a5:c8:60:03:f2:5c:cd:23:98:e6:c0:
be:4b:c9:a3:8f:bf:ee:cf:1c:78:85:5a:b7:a6:d8:
17:47:8d:b4:32:b7:a1:c0:19:92:a1:13:1a:01:52:
5d:a9:24:bb:45:72:39:da:c9:7b:35:97:b2:1d:74:
37:5f:92:c5:96:5a:77:46:cb:bb:26:e2:ac:e3:20:
ee:5d:72:be:f1:c7:8c:21:09:59:b5:6e:c0:8a:d9:
92:83:15:2f:0b:50:ef:e5:0a:80:d5:98:1d:e9:28:
2a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D2:FE:EA:12:EE:A8:04:C5:4D:8F:00:79:EE:8D:40:FB:68:10:74
X509v3 Authority Key Identifier:
keyid:02:5A:FE:91:95:48:20:49:F2:50:93:EB:89:81:15:C6:BD:37:14:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Alr-kZVIIEnyUJPriYEVxr03FEg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:84:80:ab:7e:f0:4a:8f:d4:81:08:3c:a0:9a:f0:0f:86:c4:
1e:5e:69:88:85:4f:cb:e1:a0:cf:91:2c:c1:63:7c:a6:4a:28:
52:47:5a:49:3f:d7:c2:df:03:24:61:9c:b0:01:51:6c:b4:06:
3a:eb:56:ee:2c:0c:96:9a:88:e1:c4:58:d9:22:e4:98:3c:5d:
79:cb:ec:f2:47:dc:0d:ce:c6:fd:54:01:e6:80:38:4f:0a:e0:
2e:f5:2f:b2:1f:51:55:9f:fb:6b:ad:f0:9f:22:36:67:1e:54:
ae:23:ec:af:78:45:6d:2d:09:58:0c:66:00:ad:89:57:fa:39:
f4:51:10:27:48:93:63:8c:75:1c:28:85:01:4e:3a:5c:e1:b7:
f8:4c:48:99:bc:31:86:c9:32:47:6c:13:cc:69:86:71:12:d7:
02:19:36:fe:8e:f1:bb:77:1f:6e:c7:52:da:62:5f:c7:fd:c1:
93:32:15:03:20:0f:3f:36:02:be:50:f6:26:ed:3c:2b:f2:07:
cf:dd:a5:15:55:bc:db:19:29:91:97:c1:e7:08:fc:7d:8d:27:
4c:e7:80:7a:0d:64:58:5d:d9:e8:82:b8:8e:8a:80:f5:f4:48:
ab:06:23:27:57:51:83:e0:90:b6:a8:6e:14:68:71:b6:90:65:
78:d7:0e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 12:00:41 2026 by rpki-client